| Details | |
| Product: | Windows Operating System |
| Event ID: | 593 |
| Source: | Security |
| Version: | 5.0 |
| Component: | Security Event Log |
| Symbolic Name: | SE_AUDITID_PROCESS_EXIT |
| Message: | A process has exited: Process ID: %1 User Name: %2 Domain: %3 Logon ID: %4 |
| Explanation | |
|
A user or service has successfully closed a program. This message corresponds to a Security 592 message, which indicates that the program was started. Associated messages have the same Process ID number. Process ID numbers are reused, so a given instance of Security 593 message only corresponds to the most recent Security 592 message with the same Process ID number. |
|
| User Action | |
|
No user action is required. |
|